mirror of
https://github.com/crowdsecurity/cs-firewall-bouncer.git
synced 2024-08-19 01:18:49 +03:00
b7f197de0b
* Improved install/uninstall scripts * Improved rpm/deb builds * CI: release tarball for linux, binaries for freebsd * CI/makefile: build and distribute static binaries only * Moved binary from /usr/sbin to /usr/bin * CI: explicit workflow permissions * Fixed configurable hook metrics for nftables * Update to go 1.20.3
154 lines
3.5 KiB
Python
Executable File
154 lines
3.5 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
import argparse
|
|
import json
|
|
import os
|
|
import shutil
|
|
import subprocess
|
|
import sys
|
|
|
|
|
|
def _goos():
|
|
yield 'linux'
|
|
yield 'freebsd'
|
|
|
|
|
|
def _goarch(goos):
|
|
yield '386'
|
|
yield 'amd64'
|
|
yield 'arm'
|
|
yield 'arm64'
|
|
if goos == 'linux':
|
|
yield 'ppc64le'
|
|
yield 's390x'
|
|
yield 'riscv64'
|
|
|
|
|
|
def _goarm(goarch):
|
|
if goarch != 'arm':
|
|
yield ''
|
|
return
|
|
yield '6'
|
|
yield '7'
|
|
|
|
|
|
def _build_tarball(os):
|
|
if os == 'linux':
|
|
yield True
|
|
else:
|
|
yield False
|
|
|
|
|
|
def filename_for_entry(prog_name, entry):
|
|
arch = entry['goarch']
|
|
if entry['goarch'] == 'arm':
|
|
arch += 'v' + entry['goarm']
|
|
ret = f'{prog_name}-{entry["goos"]}-{arch}'
|
|
if entry['build_tarball']:
|
|
ret += '.tgz'
|
|
return ret
|
|
|
|
|
|
def matrix(prog_name):
|
|
for goos in _goos():
|
|
for goarch in _goarch(goos):
|
|
for goarm in _goarm(goarch):
|
|
for build_tarball in _build_tarball(goos):
|
|
yield {
|
|
'goos': goos,
|
|
'goarch': goarch,
|
|
'goarm': goarm,
|
|
'build_tarball': build_tarball,
|
|
}
|
|
|
|
|
|
def print_matrix(prog_name):
|
|
j = {'include': list(matrix(prog_name))}
|
|
|
|
if os.isatty(sys.stdout.fileno()):
|
|
print(json.dumps(j, indent=2))
|
|
else:
|
|
print(json.dumps(j))
|
|
|
|
|
|
default_tarball = {
|
|
'goos': 'linux',
|
|
'goarch': 'amd64',
|
|
'goarm': '',
|
|
'build_tarball': True,
|
|
}
|
|
|
|
default_binary = {
|
|
'goos': 'linux',
|
|
'goarch': 'amd64',
|
|
'goarm': '',
|
|
'build_tarball': False,
|
|
}
|
|
|
|
|
|
def run_build(prog_name):
|
|
# call the makefile for each matrix entry
|
|
|
|
default_tarball_filename = None
|
|
default_binary_filename = None
|
|
|
|
for entry in matrix(prog_name):
|
|
env = {'GOOS': entry['goos'], 'GOARCH': entry['goarch']}
|
|
|
|
if entry['goarm']:
|
|
env['GOARM'] = entry['goarm']
|
|
|
|
if entry['build_tarball']:
|
|
target = 'tarball'
|
|
else:
|
|
target = 'binary'
|
|
|
|
print(f"Running make {target} for {env}")
|
|
|
|
subprocess.run(['make', target], env=os.environ | env, check=True)
|
|
|
|
want_filename = filename_for_entry(prog_name, entry)
|
|
|
|
if entry['build_tarball']:
|
|
os.rename(f'{prog_name}.tgz', want_filename)
|
|
else:
|
|
os.rename(f'{prog_name}', want_filename)
|
|
|
|
# if this is the default tarball or binary, save the filename
|
|
# we'll use it later to publish a "default" package
|
|
|
|
if entry == default_tarball:
|
|
default_tarball_filename = want_filename
|
|
|
|
if entry == default_binary:
|
|
default_binary_filename = want_filename
|
|
|
|
# Remove the directory to reuse it
|
|
subprocess.run(['make', 'clean-release-dir'], env=os.environ | env, check=True)
|
|
|
|
# publish the default tarball and binary
|
|
if default_tarball_filename:
|
|
shutil.copy(default_tarball_filename, f'{prog_name}.tgz')
|
|
|
|
if default_binary_filename:
|
|
shutil.copy(default_binary_filename, f'{prog_name}')
|
|
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser(
|
|
description='Build release binaries and tarballs for all supported platforms')
|
|
parser.add_argument('action', help='Action to perform (ex. run-build, print-matrix)')
|
|
parser.add_argument('prog_name', help='Name of the program (ex. crowdsec-firewall-bouncer)')
|
|
|
|
args = parser.parse_args()
|
|
|
|
if args.action == 'print-matrix':
|
|
print_matrix(args.prog_name)
|
|
|
|
if args.action == 'run-build':
|
|
run_build(args.prog_name)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|